Log in Start free

Vulnerability · Published Jul 25, 2025 · Assigned by Linux

CVE-2025-38466perf: Revert to requiring CAP_SYS_ADMIN for uprobes

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 85.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: perf: Revert to requiring CAP_SYS_ADMIN for uprobes Jann reports that uprobes can be used destructively when used in the middle of an instruction. The kernel only verifies there is a valid instruction at the requested offset, but due to variable instruction length cannot determine if this is an instruction as seen by the intended execution stream. Additionally, Mark Rutland notes that on architectures that mix data in the text segment (like arm64), a similar things can be done if the data word is 'mistaken' for an instruction. As such, require CAP_SYS_ADMIN for uprobes.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.147-1DEBIAN-CVE-2025-38466
Debian:13linux6.12.41-1DSA-5975-1
Debian:13linux6.12.41-1DEBIAN-CVE-2025-38466
Debian:14linux6.16.3-1DEBIAN-CVE-2025-38466
Ubuntu:22.04:LTSlinux5.15.0-156.166UBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux6.8.0-100.100UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-aws5.15.0-1092.99UBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-aws6.8.0-1046.49UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-aws-6.146.14.0-1017.17~24.04.1USN-7879-3
Ubuntu:24.04:LTSlinux-aws-6.146.14.0-1017.17~24.04.1UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1046.49~22.04.1UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-azure5.15.0-1096.105UBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-azure6.8.0-1046.52UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-azure-6.146.14.0-1017.17~24.04.1USN-7934-1
Ubuntu:24.04:LTSlinux-azure-6.146.14.0-1017.17~24.04.1UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1051.57~22.04.1UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1096.105.1UBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1046.53UBUNTU-CVE-2025-38466
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1046.53~22.04.1UBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-gcp5.15.0-1092.101UBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-gcp6.8.0-1047.50UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-gcp-6.146.14.0-1020.21~24.04.1USN-7879-4
Ubuntu:24.04:LTSlinux-gcp-6.146.14.0-1020.21~24.04.1UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1047.50~22.04.2UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-gke5.15.0-1089.95UBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-gke6.8.0-1043.48UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1075.83UBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1030.33UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-hwe-6.146.14.0-36.36~24.04.1USN-7879-1
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-100.100~22.04.1UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-ibm5.15.0-1086.89UBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-ibm6.8.0-1044.44UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1044.44~22.04.1UBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1087.93UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-kvm5.15.0-1088.93UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-156.166UBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-100.100.1UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-100.100.1~22.04.1UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1087.88UBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1046.49UBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1046.49~22.04.1UBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1046.49.1UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1045.45UBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1020.20UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1034.34UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-oem-6.146.14.0-1016.16UBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-oem-6.146.14.0-1016.16USN-7880-1
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-oracle5.15.0-1090.96UBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-oracle6.8.0-1043.44UBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-oracle-6.146.14.0-1017.17~24.04.1USN-7879-3
Ubuntu:24.04:LTSlinux-oracle-6.146.14.0-1017.17~24.04.1UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1043.44~22.04.1UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-raspi5.15.0-1086.89UBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-raspi6.8.0-1047.51UBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-riscv-6.146.14.0-36.36.1~24.04.1UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-100.100~22.04.1UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-38466
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1023.24UBUNTU-CVE-2025-38466
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1056.60UBUNTU-CVE-2025-38466

Affected products (as reported)

VendorProductVersions
Linux Linux c9e0924e5c2b59365f9c0d43ff8722e79ecf4088 – before d7ef1afd5b3f43f4924326164cee5397b66abd9cc9e0924e5c2b59365f9c0d43ff8722e79ecf4088 – before c0aec35f861fa746ca45aa816161c74352e6ada8c9e0924e5c2b59365f9c0d43ff8722e79ecf4088 – before 8e8bf7bc6aa6f583336c2fda280b6cea0aed5612c9e0924e5c2b59365f9c0d43ff8722e79ecf4088 – before 183bdb89af1b5193b1d1d9316986053b15ca6fa4c9e0924e5c2b59365f9c0d43ff8722e79ecf4088 – before a0a8009083e569b5526c64f7d3f2a62baca95164c9e0924e5c2b59365f9c0d43ff8722e79ecf4088 – before d5074256b642cdeb46a70ce2f15193e766edca68c9e0924e5c2b59365f9c0d43ff8722e79ecf4088 – before ba677dbe77af5ffe6204e0f3f547f3ba059c6302
Linux Linux 5.8

References